From b74b88f30da2389f333a31815d8326d5576d3331 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Mon, 23 Nov 2015 17:10:51 -0500 Subject: g723_1: Handle values at the ends of the table in lsp2lpc() Fixes out of array reads. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer Signed-off-by: Vittorio Giovara --- libavcodec/g723_1.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libavcodec/g723_1.c') diff --git a/libavcodec/g723_1.c b/libavcodec/g723_1.c index 4904e52ac0..80c7d1f491 100644 --- a/libavcodec/g723_1.c +++ b/libavcodec/g723_1.c @@ -386,7 +386,7 @@ static void lsp2lpc(int16_t *lpc) /* Calculate negative cosine */ for (j = 0; j < LPC_ORDER; j++) { - int index = lpc[j] >> 7; + int index = (lpc[j] >> 7) & 0x1FF; int offset = lpc[j] & 0x7f; int temp1 = cos_tab[index] << 16; int temp2 = (cos_tab[index + 1] - cos_tab[index]) * -- cgit v1.2.3